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Amendments to the Claims 
This listing of claims will replace all prior versions, and listings, of the claims: 

1 . (original) In a computer including hardware, a virtual machine monitor, and first and 
second operating system instances, a method comprising: 

using the virtual machine monitor to expose the first operating system instance to 
a first hardware partition and prevent the first operating system instance Ixom discovering 
a second hardware partition; 

using the virtual machine monitor to expose the second operating system instance 
to the second hardware partition and prevent the second operating system instance fi-om 
discovering the first hardware partition; and 

using the virtual machine monitor to share at least some of the hard ware among 
the first and second operating system instances. 

2. (original) The method of claim 1 , wherein the first and second partitions include 
different portions of memory. 

3. (original) The method of claim 1, wherein the first and second paititions include 
different I/O devices. 

4. (original) The method of claim 1 , wherein the shared hard ware includes a CPU. 

5. (original) The method of claim 1 , wherein the virtual machine monitor allows the first 
instance to have direct control over the first partition, and the second instance to have 
direct control over the second partition. 

6. (original) The method of claim 1 , wherein the virtual machine monitor configures the 
hardware so accesses to addresses of interest trap to the VMM; and wherein the first and 
second instances are booted on the virtual machine monitor after the hardware has been 
configured. 
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7. (original) The method of claim 6, wherein the virtual machine monitor uses memory 
management to partition I/O devices. 

8. (original) The method of claim 7, wherein the VMM configures the hardware to trap to 
the VMM either when an access misses in a translation lookaside buffer, or when one of 
the operating system instances modifies its page table. 

9. (original) The method of claim 7, wherein the hard ware is configured to treat physical 
addresses as virtual addresses, whereby the virtual machine monitor also uses memory 
management to trap accesses to physical addresses. 

1 0. (original) The method of claim 9, wherein the hardware includes a CPU, and wherein 
the virtual machine monitor configures the CPU to disable direct accessibility of the 
physical memory, whereby the VMM can trap I/O and physical memory accesses. 

1 1 . (original) The method of claim 7, wherein using the memory management includes 
inspecting an address translation on a trap and modifying, accepting, or rejecting the 
translation. 

12. (original) The method of claim 7, wherein using the memory management includes 
inserting translations for I/O addresses into a translation lookaside buffer or page table. 

13. (original) The method of claim 12, wherein the virtual machine monitor grants 
unfettered access by an operating system instance to the range of physical memory 
covered by the translation entry in its translation lookaside buffer or page table. 

14. (original) The method of claim 6, wherein the traps occur during resource discovery 
of a booting operating system instance; and wherein the virtual machine monitor 
responds to a trap by misinforming the booting OS instance about the existence of 
hardware not in its partition. 
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15. (original) The method of claim 1, wherein the virtual machine monitor modifies a 
hardware description table to expose and prevent discovery. 

16. (original) The method of claim 1, wherein the virtual machine monitor performs 
emulation to share hardware. 

17. (original) The method of claim 1, further comprising: 

delivering interrupts to interrupt handlers maintained by the first instance when 
the first instance accesses the first partition; and 

delivering interrupts directly to interrupt handlers maintained by the second 
instance when the second instance accesses the second partition. 

18. (original) The method of claim 1, wherein operation of the virtual machine monitor is 
transparent to the first and second operating system instances. 

19. (original) The method of claim 1, wherein the virtual machine monitor partitions 1/0 
devices bus-wise. 

20. (original) In a computer including hardware, a virtual machine monitor running on 
the hardware, a method comprising: 

booting a plurality of operating system instances on the virtual machine monitor; 

using the virtual machine monitor to expose each of the booting operating system 
instances to its ov/n partition and to prevent each of the operating system instances from 
discovering other hardware partitions; and 

using the virtual machine monitor to share at least some of the hardware among 
the operating system instances; 

wherein operation of the virtual machine monitor is transparent to the plurality of 
operating system instances. 

21. (original) The method of claim 20, wherein the virtual machine monitor can configure 
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the hardware so accesses to addresses of interest trap to the VMM; and wherein the 
operating system instances are booted on the virtual machine monitor after the hardware 
has been configured. 

22. (original) The method of claim 20, wherein the hardware includes a CPU, and 
wherein the virtual machine monitor can configure the CPU to disable direct accessibility 
of the physical memory, whereby the VMM can trap I/O and physical memory accesses. 

23. (original) The method of claim 20, wherein the virtual machine monitor uses memory 
management to partition I/O devices, the memory management including inspecting an 
address translation on a trap and modifying, accepting, or rejecting the translation. 

24. (original) The method of claim 20, wherein the virtual machine monitor uses memory 
management to partition I/O devices, the memory management including inserting 
translations for 1/0 addresses into a translation lookaside buffer or page table. 

25. (original) The method of claim 24, wherein the virtual machine monitor grants 
unfettered access by an operating system instance to the range of physical memory 
covered by the translation entry in its translation lookaside buffer or page table. 

26. (original) The method of claim 20, wherei n traps occur during resource discovery of a 
booting operating system instance; and wherein the virtual machine monitor responds to a 
trap by misinforming the booti ng OS instance about the existence of hardware not in its 
partition. 

27. (original) The method of claim 20, wherein the virtual machine monitor modifies a 
hardware description table to expose and prevent discovery. 

28. (original) The method of claim 20, wherein the virtual machine monitor partitions I/O 
devices bus-wise. 



5 



Application No, 1 0/676,92 1 
Response to OA of 06/12/2007 



29. (currently amended) A compute r proc e ssor and m e mory comprising: 

memory for storing a virtual machine monitor, a first operating system, and a 
second operating system: 

a processor for running the virtual machine monitor and first and second operating 
system instances on the virtual machine monitor: 

moans for running a virtual maohino monitor; and 

moanij for running first and Gocond operating system instanc e s on the virtual 
machin e monitor; 

the virtual machine monitor designed to expose a first operating system instance 
to a first hardware partition and prevent the first operating system instance from 
discovering a second hardware partition; 

the virtual machine monitor designed to expose a second operating system 
instance to the second hardware partition and prevent the second operating system 
instance from discovering the first hardware partition; 

the virtual machine monitor designed to allow at least some hardwai'e sharing 
among the first and second operating system instances. 

30. (original) A computer for running first and second operating system instances, the 
computer comprising hardware including memory, the memory encoded with a virtual 
machine monitor for exposing the first operating system instance to a first partition of the 
hardware and preventing the first operating system instance from discovering a second 
partition of the hardware; exposing the second operating system instance to the second 
hardware partition and preventing the second operating system instance from discovering 
the first hardware partition; and sharing at least some of the hardware among the first and 
second operating system instances. 

31. (original) The computer of claim 30, wherein the virtual machine monitor can 
configure the hardware so accesses to addresses of interest trap to the VMM; whereby 
operating system instances can be booted on the virtual machine monitor after the 
hardware has been configured. 
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32. (original) The computer of claim 30, wherein the hardware includes a CPU, and 
wherein the virtual machine monitor can configure the CPU to disable direct accessibility 
of the physical memory, whereby the VMM can trap I/O and physical memory accesses. 

33. (original) The computer of claim 30, wherein the virtual machine monitor can use 

memory management to partition 1/0 devices, the memory management including 
inspecting an address translation on a trap and modifying, accepting, or rejecting the 
translation. 

34. (original) The computer of claim 30, wherein the virtual machine monitor can use 
memory management to partition I/O devices, the memory management including 
inserting translations for I/O addresses into a translation lookaside buffer or page table. 

35. (original) The computer of claim 30, wherein traps occur during resource discovery 
of a booting operating system instance; and wherein the virtual machine monitor can 
respond to a trap by misinforming the booting OS instance about the existence of 
hardware not in its partition. 

36. (original) The computer of claim 30, wherein the virtual machine monitor can modify 
a hardware description table to expose and prevent discovery. 

37. (original) The computer of claim 30, wherein the virtual machine monitor can 
partition I/O devices bus-wise. 

38. (original) An article for a computer, the article comprising computer memory 
encoded with a virtual machine monitor for exposing a first operating system instance to 
a first hardware partition and preventing the first operating system instance from 
discovering a second hardware partition; exposing a second operating system instance to 
the second hardware partition and preventing the second operating system instance from 
discovering the first hardware partition; and sharing at least some of the hardware among 
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the first and second operating system instances. 

39. (original) The article of claim 38, wherein the virtual machine monitor can configure 
the hardware so accesses to addresses of interest trap to the VMM; whereby operating 
system instances can be booted on the virtual machine monitor after the hardware has 
been configured. 

40. (original) The article of claim 38, wherein the hardware includes a CPU, and wherein 
the virtual machine monitor can configure the CPU to disable direct accessibility of the 
physical memory, whereby the VMM can trap I/O and physical memory accesses. 

41 . (original) The article of claim 38, wherein the virtual machine monitor can use 
memory management to partition I/O devices, the memory management including 
inspecting an address translation on a trap and modifying, accepting, or rejecting the 
translation. 

42. (original) The article of claim 38, wherein the virtual machine monitor can use 
memory management to partition I/O devices, the memory management including 
inserting translations for 1/0 addresses into a translation lookaside buffer or page table. 

43. (original) The article of claim 38, wherein the traps occur during resource discovery 
of a booting operating system instance; and wherein the virtual machine monitor can 
respond to a trap by misinforming the booting OS instance about the existence of 
hardware not in its partition. 

44. (original) The article of claim 38, wherein the virtual machine monitor can modify a 
hardware description table to expose and prevent discovery. 

45. (original) The article of claim 38, wherein the virtual machine monitor can partition 
I/O devices bus-wise. 
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